Understanding Group Policy (GP) (3.4)

To understand Group Policy easily let us recall the definitions for groups and objects in Chapter 4, Directory Services in Windows Server. As you know, from an administration point of view, domain-based networks are centralized environments. In the AD, a group is a collection of AD objects. AD objects typically represent users, computers, peripheral devices, and network services. In such a complex environment there is a need to set up configurations that will limit the user's ability to change options both on local computers and on the network. So, the GP is the best option offered by Microsoft to set up these restrictions at the computer account and user account level. So, it can be concluded that GPs are templates that enable system administrators to control what users can and cannot do on computers, peripheral devices, and network...